CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- pycryptodomePyCryptodome integer overflow vulnerability7.5 High
- xiuno xiunobbsThe editor in Xiuno BBS 4.0.4 allows stored XSS.6.1 Medium
- telus actiontec t2200h firmwarefileshare.cmd on Telus Actiontec T2200H T2200H-31.128L.03 devices allows OS Command Injection via...8.8 High
- libgd, canonical ubuntu linux, debian linux +2 moreLibgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function...8.8 High
- debian advanced package tool, canonical ubuntu linux +1 moreThe mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x...5.9 Medium
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability"...9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful...7.5 High
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful...7.5 High
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player 30.0.0.134 and earlier have a security bypass vulnerability. Successful...9.8 Critical
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful...5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe spectre_v2_select_mitigation function in arch/x86/kernel/cpu/bugs.c in the Linux kernel...6.5 Medium
- swooleThe unpack implementation in Swoole version 4.0.4 lacks correct size checks in the...7.5 High
- libgit2, debian linux +1 moreIn ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote...7.5 High
- tecrail responsive filemanager/filemanager/upload.php in Responsive FileManager before 9.13.3 allows Directory Traversal and...7.5 High
- dojotoolkit dojo, debian linux +1 moredojox vulnerable to unescaped string injection9.8 Critical
- gemalto sentinel license managerA vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 (fixed...7.5 High
- zemana antiloggerA vulnerability in the permission and encryption implementation of Zemana Anti-Logger 1.9.3.527...7.5 High
- embedthis appweb, goahead, juniper junos +2 moreAn issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. An HTTP POST...7.5 High
- embedthis appweb, goahead, juniper junos +2 moreAn issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server...7.5 High
linuxUbuntulinux regressionsNo score- google chromeJavaScript alert handling in Prompts in Google Chrome prior to 68.0.3440.75 allowed a remote...6.5 Medium
- google androidCertain LG devices based on Android 6.0 through 8.1 have incorrect access control for MLT...9.8 Critical
- google androidCertain LG devices based on Android 6.0 through 8.1 have incorrect access control in the GNSS...9.8 Critical
- google androidCertain LG devices based on Android 6.0 through 8.1 have incorrect access control for SystemUI...9.8 Critical
- trustedcomputinggroup trusted platform moduleAn issue was discovered that affects all producers of BIOS firmware who make a certain realistic...7.1 High
- pimcorePimcore SQLi Vulnerability6.5 Medium
- pimcorePimcore CSRF Vulnerability8.8 High
- ibm security access manager for enterprise single sign-onIBM Security Access Manager for Enterprise Single Sign-On 8.2.2 does not set the secure attribute...4.3 Medium
- eltex esp-200 firmware, kaspersky lab eltex esp-200 +1 moreAn attacker without authentication can login with default credentials for privileged users in...7.3 High
- eltex esp-200 firmware, kaspersky lab eltex esp-200 +1 moreAn authenticated attacker with low privileges can use insecure sudo configuration to expand...8.8 High
- eltex esp-200 firmware, kaspersky lab eltex esp-200 +1 moreAn authenticated attacker with low privileges can activate high privileged user and use it to...8.8 High
- eltex esp-200 firmware, kaspersky lab eltex esp-200 +1 moreAn authenticated attacker with low privileges can extract password hash information for all users...6.5 Medium
- eltex esp-200 firmware, kaspersky lab eltex esp-200 +1 moreAn authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200...8.8 High
- kaspersky lab kraftway, kraftway 24f2xg router firmware +1 moreUsage of SSLv2 and SSLv3 leads to transmitted data decryption in Kraftway 24F2XG Router firmware...5.9 Medium
- kaspersky lab kraftway, kraftway 24f2xg router firmware +1 moreA Buffer Overflow exploited through web interface by remote attacker can cause denial of service...7.5 High
- kaspersky lab kraftway, kraftway 24f2xg router firmware +1 moreA Buffer Overflow exploited through web interface by remote attacker can cause remote code...9.8 Critical
- kaspersky lab kraftway, kraftway 24f2xg router firmware +1 moreAn attacker with low privileges can cause denial of service in Kraftway 24F2XG Router firmware...6.5 Medium
- kaspersky lab kraftway, kraftway 24f2xg router firmware +1 moreDenial of service via crafting malicious link and sending it to a privileged user can cause...6.5 Medium
- kaspersky lab kraftway, kraftway 24f2xg router firmware +1 moreRouter Default Credentials in Kraftway 24F2XG Router firmware version 3.5.30.1118 allow remote...9.8 Critical
- git-dummy-commit project git-dummy-commitCommand Injection in git-dummy-commit9.8 Critical
- cryo project cryoCode Injection in cryo9.8 Critical
- flintcmsPrivilege Escalation due to Blind NoSQL Injection in flintcms9.8 Critical
- f5 big-ip access policy manager client, f5 networks, inc. big-ip apm client for windows +1 moreWindows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by...7.8 High
- f5 big-ip access policy manager, big-ip access policy manager client, f5 networks, inc. big-ip apm client for linux +1 more +3 moreThe svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for...7.8 High
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreOpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for...5.3 Medium
- linux kernel, xen, canonical ubuntu linux +2 moreAn issue was discovered in xenvif_set_hash_mapping in drivers/net/xen-netback/hash.c in the Linux...7.8 High
- spice project spice, [unknown] spice:, canonical ubuntu linux +9 more +11 moreA vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for...8.3 High
- telerik justassembly, justdecompile +1 moreAn issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through...7.8 High
- linecorp line** DISPUTED ** An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android....7.0 High
- linecorp line** DISPUTED ** An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. The...7.0 High
- Show moreLoading…